fix(deps): batch security update — 3 vulnerabilities (#42110)

## Summary
Batch security update via resolutions/version bumps.

### Resolved alerts
- Resolves #728 — nanoid → 3.3.17 (high)
- Resolves #727 — nanoid → 3.3.17 (high)
- Resolves #726 — js-yaml → 3.15.1 (high)
- Resolves #711 — ip-address (transitive, resolutions pin) → 10.3.1
(high)

No code changes — version bumps and resolutions only.

/ok-to-test tags="@tag.All"

<!-- This is an auto-generated comment: Cypress test results  -->
> [!TIP]
> 🟢 🟢 🟢 All cypress tests have passed! 🎉 🎉 🎉
> Workflow run:
<https://github.com/appsmithorg/appsmith/actions/runs/31467807106>
> Commit: fd68575
> <a
href="https://internal.appsmith.com/app/cypress-dashboard/rundetails-65890b3c81d7400d08fa9ee5?branch=master&workflowId=31467807106&attempt=2"
target="_blank">Cypress dashboard</a>.
> Tags: `@tag.All`
> Spec:
> <hr>Tue, 11 Aug 2026 08:40:32 UTC
<!-- end of auto-generated comment: Cypress test results  -->

Co-authored-by: appsmith-smithes[bot] <appsmith-smithes[bot]@users.noreply.github.com>

Author: appsmith-smithes[bot]

app/client/package.json

@@ -166,7 +166,7 @@
     "moment": "2.29.4",
     "moment-timezone": "^0.5.35",
     "mutative": "^1.1.0",
-    "nanoid": "3.3.11",
+    "nanoid": "^3.3.17",
     "node-forge": "^1.4.0",
     "object-hash": "^3.0.0",
     "openai": "4.87.3",
@@ -471,7 +471,7 @@
     "@protobufjs/utf8": "1.1.1",
     "tar": "^7.5.19",
     "vite": "6.4.3",
-    "js-yaml": "^3.15.0",
+    "js-yaml": "^3.15.1",
     "mdast-util-to-hast": "13.2.1",
     "ajv@^6.12.2": "6.14.0",
     "ajv@^6.12.4": "6.14.0",
@@ -497,6 +497,8 @@
     "svgo@^2.7.0": "2.8.3",
     "svgo@^3.3.3": "3.3.4",
     "svgo": "^2.8.3",
-    "@opentelemetry/core": "^2.8.0"
+    "@opentelemetry/core": "^2.8.0",
+    "nanoid": "^3.3.17",
+    "ip-address": "^10.3.1"
   }
 }

app/client/yarn.lock

@@ -13830,7 +13830,7 @@ __metadata:
     moment-timezone: ^0.5.35
     msw: ^0.28.0
     mutative: ^1.1.0
-    nanoid: 3.3.11
+    nanoid: ^3.3.17
     node-forge: ^1.4.0
     object-hash: ^3.0.0
     openai: 4.87.3
@@ -22013,13 +22013,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"ip-address@npm:^9.0.5":
-  version: 9.0.5
-  resolution: "ip-address@npm:9.0.5"
-  dependencies:
-    jsbn: 1.1.0
-    sprintf-js: ^1.1.3
-  checksum: aa15f12cfd0ef5e38349744e3654bae649a34c3b10c77a674a167e99925d1549486c5b14730eebce9fea26f6db9d5e42097b00aa4f9f612e68c79121c71652dc
+"ip-address@npm:^10.3.1":
+  version: 10.5.0
+  resolution: "ip-address@npm:10.5.0"
+  checksum: ffb64aea3ab0bf975b237954f89bf3c37cb5fc9d078cf5868408e54d29636d14618ed67dafcde664b3cdfc778ee78c811286cf67e59d1243a0c198d05aa47683
   languageName: node
   linkType: hard
 
@@ -23699,15 +23696,15 @@ __metadata:
   languageName: node
   linkType: hard
 
-"js-yaml@npm:^3.15.0":
-  version: 3.15.0
-  resolution: "js-yaml@npm:3.15.0"
+"js-yaml@npm:^3.15.1":
+  version: 3.15.1
+  resolution: "js-yaml@npm:3.15.1"
   dependencies:
     argparse: ^1.0.7
     esprima: ^4.0.0
   bin:
     js-yaml: bin/js-yaml.js
-  checksum: 0209830c3ce51cec4c2cefee4b2b68c547b56b36920004efbf7c6a91ae7eee784bf64341738ef1acffa975d16e7882e9b69234b9a4411f455b72b33d4d74771e
+  checksum: 536cfb984b61d1544dbdbe394254dd13481a94171cb3a61608572d9112a63cbace9dd900cb83a4e530ac36427fff77d9e1cb6734917c6fea951d00b4f7bbb163
   languageName: node
   linkType: hard
 
@@ -23718,13 +23715,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"jsbn@npm:1.1.0":
-  version: 1.1.0
-  resolution: "jsbn@npm:1.1.0"
-  checksum: 944f924f2bd67ad533b3850eee47603eed0f6ae425fd1ee8c760f477e8c34a05f144c1bd4f5a5dd1963141dc79a2c55f89ccc5ab77d039e7077f3ad196b64965
-  languageName: node
-  linkType: hard
-
 "jsbn@npm:~0.1.0":
   version: 0.1.1
   resolution: "jsbn@npm:0.1.1"
@@ -26156,21 +26146,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"nanoid@npm:3.3.11":
-  version: 3.3.11
-  resolution: "nanoid@npm:3.3.11"
+"nanoid@npm:^3.3.17":
+  version: 3.3.18
+  resolution: "nanoid@npm:3.3.18"
   bin:
     nanoid: bin/nanoid.cjs
-  checksum: 3be20d8866a57a6b6d218e82549711c8352ed969f9ab3c45379da28f405363ad4c9aeb0b39e9abc101a529ca65a72ff9502b00bf74a912c4b64a9d62dfd26c29
-  languageName: node
-  linkType: hard
-
-"nanoid@npm:^3.3.16":
-  version: 3.3.17
-  resolution: "nanoid@npm:3.3.17"
-  bin:
-    nanoid: bin/nanoid.cjs
-  checksum: dbbfd5ccc15a9bce602797ee75b98ee5ad377bd217782b8d2e7438e6e0ba0c54529a9f60437910aa00e263224b3c074b51a1aa3e21084a3cb56347a6cbacc275
+  checksum: db804317d337b41602666f23014e399d1263033d13a903955c246378256fd4e002519e87199ca40b19aff52274965ac7cc6e70c13a63e194e15c4664724602d3
   languageName: node
   linkType: hard
 
@@ -32482,13 +32463,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"sprintf-js@npm:^1.1.3":
-  version: 1.1.3
-  resolution: "sprintf-js@npm:1.1.3"
-  checksum: a3fdac7b49643875b70864a9d9b469d87a40dfeaf5d34d9d0c5b1cda5fd7d065531fcb43c76357d62254c57184a7b151954156563a4d6a747015cfb41021cad0
-  languageName: node
-  linkType: hard
-
 "sprintf-js@npm:~1.0.2":
   version: 1.0.3
   resolution: "sprintf-js@npm:1.0.3"